Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a333a3a2f34382d3438203d3e203139353231.roa
File:                     323630323a666163323a333a3a2f34382d3438203d3e203139353231.roa (raw, json)
Hash identifier:          UEnfDW5EQ3RyJbLNmouh3+n1EccgDhRfGjgPx66lueo=
Subject key identifier:   5B:5F:2D:13:6E:67:CC:EF:DD:C4:44:86:BC:E2:47:00:6D:7C:9A:AA
Certificate issuer:       /CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
Certificate serial:       5A0882FE13F20FB2390E097F7AC87DE9A9FF8EE4
Authority key identifier: E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a333a3a2f34382d3438203d3e203139353231.roa
Signing time:             Wed 01 Jul 2026 01:44:56 +0000
ROA not before:           Wed 01 Jul 2026 01:39:56 +0000
ROA not after:            Wed 30 Jun 2027 01:44:56 +0000
asID:                     19521
IP address blocks:        2602:fac2:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:08:82:fe:13:f2:0f:b2:39:0e:09:7f:7a:c8:7d:e9:a9:ff:8e:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
        Validity
            Not Before: Jul  1 01:39:56 2026 GMT
            Not After : Jun 30 01:44:56 2027 GMT
        Subject: CN=5B5F2D136E67CCEFDDC44486BCE247006D7C9AAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a1:85:6c:e3:8c:da:a7:73:a2:81:db:bc:fb:
                    5d:82:e1:1c:f2:90:8b:b6:40:e5:f7:5e:ff:dd:fc:
                    73:66:9d:16:4b:e7:33:85:be:83:e8:eb:d8:b6:63:
                    28:09:d0:09:4e:a8:75:0a:0b:52:94:d2:3b:06:86:
                    5e:da:71:32:f6:60:2b:22:55:7b:6a:37:39:fc:e9:
                    93:9d:ff:0e:c3:bd:c2:11:69:3b:20:c4:53:6a:ba:
                    d0:a7:0b:42:a7:ea:97:68:19:09:6c:fa:74:de:eb:
                    67:c7:9d:cb:2c:8a:f1:13:a4:e8:c1:3f:90:5e:8c:
                    01:ac:31:13:fe:c3:fa:e7:be:1c:86:e9:19:71:7e:
                    54:1e:67:52:40:82:43:68:de:0b:51:00:eb:de:b1:
                    ca:21:b4:20:44:1a:6b:40:8f:0c:71:ae:31:ee:e0:
                    f1:c2:2d:bc:2c:ed:4d:57:4e:47:67:da:03:6e:d2:
                    d2:57:d3:6d:9e:0e:7e:2f:1b:cc:19:89:a9:0a:b6:
                    d6:a3:27:2c:7e:a5:7f:d6:07:8b:f0:48:16:c0:ff:
                    2c:47:86:12:5c:e0:bf:cd:7f:c7:07:92:d5:ba:aa:
                    1c:e3:4a:a3:91:fb:4a:e0:0b:45:5f:c1:84:b7:40:
                    5f:33:09:0c:48:49:57:e8:8e:78:22:b4:7f:78:f5:
                    be:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5F:2D:13:6E:67:CC:EF:DD:C4:44:86:BC:E2:47:00:6D:7C:9A:AA
            X509v3 Authority Key Identifier:
                keyid:E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a333a3a2f34382d3438203d3e203139353231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac2:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:37:f2:53:a5:a4:c2:45:3e:b4:c3:3d:d6:7f:d6:3c:e4:5a:
         f4:1a:c6:9c:0d:ab:68:3c:8c:0c:59:1c:0d:35:f4:94:cf:2a:
         3c:dc:7e:98:31:f0:c1:99:a6:74:b7:59:df:79:31:cc:86:bb:
         bc:d3:0c:2a:4e:35:ac:67:ae:33:24:95:7b:52:b7:75:f9:99:
         96:b1:3a:48:8c:b4:7d:13:8d:03:05:d7:bc:63:2a:d0:85:3a:
         fd:93:7f:7c:63:f0:75:56:13:55:69:c8:7c:05:67:a7:f4:dc:
         5a:c6:7a:6a:e8:6d:0a:20:4f:44:40:e0:28:e7:0e:f8:2f:44:
         f8:de:df:4d:fa:ad:1d:72:a5:d0:dd:b2:19:54:11:ed:9c:69:
         9c:a9:60:59:80:9d:01:1d:c4:3a:cf:01:fe:e4:da:4b:22:9a:
         c2:fb:90:a1:f7:d1:e5:f0:7e:65:40:64:1a:35:af:32:68:36:
         01:70:64:24:1c:5a:88:74:cb:d1:92:bd:68:67:b7:4c:d8:d0:
         89:1a:1d:2c:1b:94:72:57:02:cc:3c:b6:74:fa:8d:d2:65:51:
         9d:85:95:71:20:3a:4e:f4:d6:dc:ab:10:e0:b5:da:85:b9:1e:
         44:b1:ed:99:62:db:ba:8a:69:9e:16:ac:74:8c:0e:81:59:86:
         e7:f1:49:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:16:55 2026 by rpki-client